Open Information Security Foundation

09/07/2020

06:05 AM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

The server is setup in production, cannot jeopardise it now. But will update if I get hold of a test environment. Srijan Nandi

10/06/2019

06:53 PM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

Yes, the MTU is same on both the interfaces.
enp94s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 3000 xdp/id:256 qdis... Srijan Nandi

10/04/2019

03:40 PM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

Hello Peter,
Please find attached the stats file with 0 rules. Srijan Nandi

10/03/2019

04:31 PM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

Hello Peter,
I ran the tests with NIC ring descriptors set to 512. Results look good. But I am still unable to fig... Srijan Nandi

09/29/2019

09:14 AM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

I could run the tests with a minimum of 307 rules. Anything below that is not giving good result, there is a huge pac... Srijan Nandi

09/26/2019

12:56 PM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

Now I am facing a very peculiar problem and I am not able to make any headway. I ran the above tests with 20118 rule.... Srijan Nandi

09:40 AM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

All the test were conducted in 5.0.0.
Suricata version 5.0.0-dev (178d420f3 2019-09-19)
I have updated the exc... Srijan Nandi

09/24/2019

07:15 AM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

Hello Andreas,
cat /proc/meminfo
MemTotal: 528017292 kB
MemFree: 487338968 kB
MemAvailable: 479... Srijan Nandi

09/23/2019

01:43 PM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

Hello Peter,
I ran the test on 5.0.0-dev. And attached are the test results.
suricata --build-info
This is ... Srijan Nandi

09/22/2019

04:44 PM Suricata Support #3119: help optimizing suricata in af-packet mode for 30gbps+ traffic

Peter Manev wrote:
> What was the stream depth ? (i did not see i tin the excel break down).
stream depth for all t... Srijan Nandi